70-741

70-741 practice questions, page 8 of 9, with answer review and explanations.

Question 36

Your network contains an Active Directory forest named contoso.com. The forest contains two domains named contoso.com and litwareinc.com. Your company recently deployed DirectAccess for the members of a group named DA_Computers. All client computers are members of DA_Computers. You discover that DirectAccess clients can access the resources located in the contoso.com domain only. The clients can access the resources in the litwareinc.com domain by using an L2TP VPN connection to the network. You need to ensure that the DirectAccess clients can access the resources in the litwareinc.com domain. What should you do?

  1. From a Group Policy object (GPO), modify the Name Resolution Policy Table (NRPT).
  2. From the properties of the servers in litwareinc.com, configure the delegation settings.
  3. On an external DNS server, create a zone delegation for litwareinc.com.
  4. Add the servers in litwareinc.com to the RAS and IAS Servers group.

Question 37

You have a server named Server1 that runs Windows Server 2016. Server1 is located on the perimeter network, and only inbound TCP port 443 is allowed to connect Server1 from the Internet. You install the Remote Access server role on Server1. You need to configure Server1 to accept VPN connections over port 443. Which VPN protocol should you use?

  1. PPTP
  2. SSTP
  3. L2TP
  4. IKEv2

Question 38

You have an Active Directory domain named Contoso.com. The domain contains servers named Server1 and Server2 that run Windows Server 2016. You install the Remote Access server role on Server1. You install the Network Policy and Access Services server role on Server2. You need to configure Server1 to use Server2 as a RADIUS server. What should you do?

  1. From the Connection Manager Administration Kit, create a Connection Manager profile.
  2. From Routing and Remote Access, configure the authentication provider.
  3. From Active Directory Users and Computers, modify the Delegation settings of the Server1 computer account.
  4. From Server Manager, create an Access Policy.

Question 39

You company has a main office in London. The company has 1,000 users who are located in many countries. You plan to deploy a large remote access solution for the company. The London office has three servers named Server1, Server2, and Server3 that run Windows Server 2016. You plan to use Server1 as a VPN server, Server2 as a RADIUS proxy, and Server3 as a RADIUS server. You need to configure Server2 to support the planned deployment. Which three actions should you perform on Server2? Each correct answer presents part of the solution.

  1. Create a connection request policy.
  2. Deploy a Windows container.
  3. Add a RADIUS client.
  4. Create a network policy.
  5. Create a remote RADIUS server group.

Question 40

You have a server named Host1 that runs Windows Server 2016. You configure Host1 as a virtualization host and create 20 new virtual machines on Host1. You need to ensure that all of the virtual machines can connect to the Internet through Host1. Which three actions should you perform? Each correct answer presents part of the solution.

  1. On a virtual machine, install the Remote Access server role.
  2. From the properties of each virtual machine, enable virtual LAN identification.
  3. From the properties of each virtual machine, connect to the virtual machine switch.
  4. On Host1, configure the network address translation (NAT) network.
  5. On Host1, create an internal virtual machine switch and specify an IP address for the switch.